SecuriteInfo[.]com[.]Variant[.]Babar[.]125059[.]3649[.]18836[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Babar.125059.3649.18836.exe
Size

42KB
MD5

ba63530f00b38e5596a0ed174e630815
SHA1

64f77b573411d94660e6f923fb32be989de4609f
SHA256

4a3805e5a4525f7258107cab7323e320cc5b9e53c1cbf7b68463dbf7509c6292
SHA512

2e3f31a41500d9cfc86b1a847872ffff36c99d8c1b76a7b996fa0854a1e3d916716f696be64457de1e0bbbb5546656f1cb0e40c04cf679daeea9b44505247341
SSDEEP

768:vv4NY+HKdSf/2jX8i3SJPwktx8VStWHJduTJaspNaPqAg2NAUaUJSje:vvMYzkVmYwytWpctlpXBa

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Babar.125059.3649.18836.exe
.exe windows x86

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
memmove
memcpy
_exit
_XcptFilter
exit
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
memset

comctl32

ord17
CreateStatusWindowW
CreateToolbarEx

kernel32

VirtualAlloc
EnumLanguageGroupLocalesW
GetModuleHandleW
ReadFile
GetFileSize
GetStartupInfoW
GlobalUnlock
lstrcpyW
GlobalLock
GlobalAlloc
lstrlenW
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpW
LocalFree
FormatMessageW
GetLastError
CloseHandle
WriteFile
WideCharToMultiByte
CreateFileW
GetCurrentDirectoryW
MultiByteToWideChar
CreateProcessW
lstrcatW
GetWindowsDirectoryW

wininet

CreateUrlCacheGroup
InternetAttemptConnect
InternetConfirmZoneCrossing
InternetSetDialState
FtpSetCurrentDirectoryA
InternetCrackUrlA
FtpSetCurrentDirectoryW
GetUrlCacheEntryInfoExA
FtpGetCurrentDirectoryW
GetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA

odbc32

ord207
ord167
ord70
ord265
ord52
ord260

rpcrt4

MesEncodeFixedBufferHandleCreate
NdrRpcSsDisableAllocate
RpcAsyncInitializeHandle
RpcServerUseProtseqIfExA
UuidCreateNil
RpcBindingInqAuthInfoExA
UuidFromStringA
NdrNsSendReceive

msi

ord85
ord151
ord29
ord167
ord135
ord78
ord145
ord49
ord33

rtutils

RouterLogEventDataA
RouterLogEventStringW
TracePrintfA
RouterLogEventStringA
LogErrorW

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetCursorPos
CheckDlgButton
IsDlgButtonChecked
EndDialog
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageW
wsprintfW
GetClientRect
IsWindowVisible
MoveWindow
EnableMenuItem
GetMenu
LoadStringW
UpdateWindow
ShowWindow
CreateWindowExW
ReleaseDC
InvertRect
GetDC
SetWindowTextW
DialogBoxParamW
DefWindowProcW
RegisterClassW
LoadCursorW
MessageBoxW
CheckMenuItem
DestroyWindow
SetFocus
SetCapture
ReleaseCapture
GetCapture
SetCursor
ScreenToClient

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueW
RegEnumKeyW
RegGetValueW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyW
RegEnumValueW

shell32

ShellAboutW

ole32

OleUninitialize
OleInitialize
CLSIDFromString

oleaut32

VariantInit
SysStringLen
LoadTypeLi
SysFreeString
VariantChangeType

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

kernel32

wininet

odbc32

rpcrt4

msi

rtutils

user32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB